Aerodrome Finance Hit by DNS Hijack, Urges Users to Avoid Compromised Domains
Aerodrome Finance, a decentralized exchange on Base, suffered a DNS hijack attack redirecting users to phishing sites. The breach exploited centralized domains (.finance and .box), though smart contracts and liquidity pools remain secure.
The platform has advised users to migrate to decentralized alternatives and revoke suspicious authorizations via Revoke.cash. Investigations are ongoing with domain provider My.box to trace the attack's origin.
This incident underscores growing security risks in DeFi as adoption expands, highlighting the need for robust safeguards against domain vulnerabilities.